Proactive security for mobile devices

• US 10,623,963 B2
• Filed: 10/11/2018
• Issued: 04/14/2020
• Est. Priority Date: 12/14/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Borghei, Hooman
• Primary Examiner(s): Christensen, Scott B
• Application Number:
  US16/158,195
• Publication Number:
  US 20190149995A1
• Time in Patent Office: 551 Days
• Field of Search: None
• CPC Class Codes: H04M 1/673 the user being required to key in a code
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04M 3/42221 Conversation recording systems at the subscriber's set H04M1/656
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

Methods, program products, and systems for proactively securing mobile devices are described. A mobile device can proactively determine whether the mobile device is associated with a security risk and the level of the security risk. Upon determining a security risk, the mobile device can transmit coordinates of its current geographic location to a server. To protect privacy of authorized users, the transmission can be disabled by entering a password. If multiple failed password attempts are detected, the mobile device can proactively increase a security level of the device, and selectively protect files or other content stored on the mobile device. In some implementations, the mobile device can be transitioned into a surveillance mode where the mobile device records or captures information associated with one or more of user actions, ambient sound, images, a trajectory of the device, and transmits the recorded or captured information to the network resource.

Claims

1. A method for remotely managing a mobile device, the method comprising, at a computing device:

issuing a request to a host device to initiate a security procedure associated with the mobile device, wherein the request causes the host device to gather at least one security parameter from the mobile device;

receiving, from the host device, information associated with (i) the at least one security parameter gathered by the host device, and (ii) a security risk factor calculated by the host device;

displaying, based on the information, an option to select from one or more security commands; and

in response to receiving a selection of a security command from the one or more security commands;

causing the security command to be transmitted to the mobile device, wherein the security command causes the mobile device to;

apply a first data security scheme that corresponds to the security command, wherein the first data security scheme is applied by carrying out a set of actions defined by the first data security scheme.

2. The method of claim 1, wherein the security command further causes the mobile device to enter a mode that enables the mobile device to autonomously apply a second data security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

3. The method of claim 1, wherein the host device calculates the security risk factor based on the at least one security parameter.

4. The method of claim 1, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

5. The method of claim 1, wherein an action in the set of actions involves erasing information user data stored on the mobile device.

6. The method of claim 1, wherein an action in the set of actions involves recording activities and transmitting information about the activities to at least one of the host device or the computing device.

7. The method of claim 1, wherein causing the security command to be transmitted to the mobile device comprises:

issuing a second request to the host device to cause the host device to transmit the security command to the mobile device.

8. At least one non-transitory computer readable storage medium configured to store instructions that, when executed by at least one processor included in a computing device, cause the computing device to remotely manage a mobile device, by carrying out steps that include:

issuing a request to a host device to initiate a security procedure associated with the mobile device, wherein the request causes the host device to gather at least one security parameter from the mobile device;

receiving, from the host device, information associated with (i) the at least one security parameter gathered by the host device, and (ii) a security risk factor calculated by the host device;

displaying, based on the information, an option to select from one or more security commands; and

in response to receiving a selection of a security command from the one or more security commands;

causing the security command to be transmitted to the mobile device, wherein the security command causes the mobile device to;

apply a first data security scheme that corresponds to the security command, wherein the first data security scheme is applied by carrying out a set of actions defined by the first data security scheme.

9. The at least one non-transitory computer readable storage medium of claim 8, wherein the security command further causes the mobile device to enter a mode that enables the mobile device to autonomously apply a second data security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

10. The at least one non-transitory computer readable storage medium of claim 8, wherein the host device calculates the security risk factor based on the at least one security parameter.

11. The at least one non-transitory computer readable storage medium of claim 8, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

12. The at least one non-transitory computer readable storage medium of claim 8, wherein an action in the set of actions involves erasing information user data stored on the mobile device.

13. The at least one non-transitory computer readable storage medium of claim 8, wherein an action in the set of actions involves recording activities and transmitting information about the activities to at least one of the host device or the computing device.

14. The at least one non-transitory computer readable storage medium of claim 8, wherein causing the security command to be transmitted to the mobile device comprises:

issuing a second request to the host device to cause the host device to transmit the security command to the mobile device.

15. A computing device configured to remotely manage a mobile device, the computing device comprising:

at least one processor; and

at least one memory storing instructions that, when executed by the at least one processor, cause the computing device to;

issue a request to a host device to initiate a security procedure associated with the mobile device, wherein the request causes the host device to gather at least one security parameter from the mobile device;

receive, from the host device, information associated with (i) the at least one security parameter gathered by the host device, and (ii) a security risk factor calculated by the host device;

display, based on the information, an option to select from one or more security commands; and

in response to receiving a selection of a security command from the one or more security commands;

cause the security command to be transmitted to the mobile device, wherein the security command causes the mobile device to;

apply a first data security scheme that corresponds to the security command, wherein the first data security scheme is applied by carrying out a set of actions defined by the first data security scheme.

16. The computing device of claim 15, wherein the security command further causes the mobile device to enter a mode that enables the mobile device to autonomously apply a second data security scheme that is different from the first data security scheme when the mobile device identifies a condition that corresponds to the second data security scheme.

17. The computing device of claim 15, wherein the host device calculates the security risk factor based on the at least one security parameter.

18. The computing device of claim 15, wherein an action in the set of actions involves deactivating user installed programs on the mobile device and scrambling at least a portion of user data on the mobile device.

19. The computing device of claim 15, wherein an action in the set of actions involves recording activities and transmitting information about the activities to at least one of the host device or the computing device.

20. The computing device of claim 15, wherein causing the security command to be transmitted to the mobile device comprises:

issuing a second request to the host device to cause the host device to transmit the security command to the mobile device.